Struct AccessReviewEngine 

pub struct AccessReviewEngine { /* private fields */ }

Access review engine

This engine manages automated access reviews according to the configured schedule and policies. It generates reports, tracks approvals, and can automatically revoke access when needed.

Implementations

impl AccessReviewEngine

pub fn new(config: AccessReviewConfig) -> Self

Create a new access review engine

pub fn generate_review_id( &self, review_type: ReviewType, date: DateTime<Utc>, ) -> String

Generate a review ID based on type and date

pub async fn start_user_access_review( &mut self, users: Vec<UserAccessInfo>, ) -> Result<AccessReview, Error>

Start a user access review

This generates a review report and creates review items for each user that needs to be reviewed.

pub fn approve_user_access( &mut self, review_id: &str, user_id: Uuid, approved_by: Uuid, justification: Option<String>, ) -> Result<(), Error>

Approve a user’s access in a review

pub fn revoke_user_access( &mut self, review_id: &str, user_id: Uuid, revoked_by: Uuid, reason: String, ) -> Result<(), Error>

Revoke a user’s access in a review

pub fn get_review(&self, review_id: &str) -> Option<&AccessReview>

Get a review by ID

pub fn get_all_reviews(&self) -> Vec<&AccessReview>

Get all active reviews

pub fn get_review_items( &self, review_id: &str, ) -> Option<&HashMap<Uuid, UserReviewItem>>

Get review items for a review

pub fn check_auto_revocation(&mut self) -> Vec<(String, Uuid)>

Check for reviews that need auto-revocation

This checks all pending review items and automatically revokes access for items that have exceeded their approval deadline.

pub fn complete_review(&mut self, review_id: &str) -> Result<(), Error>

Complete a review